Graftor.591541 removal instruction

The Graftor.591541 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Graftor.591541 virus can do?

Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine Graftor.591541?


File Info:
name: 8DC72C42E6CA41F8B1C8.mlw
path: /opt/CAPEv2/storage/binaries/caa286bc09b06bbf49d7cb7829e66ef88d8c3ca6445ef222093bf6506eacd7a4
crc32: A8678AD4
md5: 8dc72c42e6ca41f8b1c8b88a5ed75d22
sha1: b9a0c1485fcf20fb7dd4cff1a0e7a36dd607b645
sha256: caa286bc09b06bbf49d7cb7829e66ef88d8c3ca6445ef222093bf6506eacd7a4
sha512: 7f7eccd193be6e1e36e721441d05696bfe04bce36ea73a85aae518c524e248889ac99092a06cbd016802bef865e85e0e70fde838214427e63a3738fc077eac90
ssdeep: 768:1W1G6HS8qsuxtZA3TvvF2VWMC6hY6xKzzRpmh29t7PoH2dfElMr37tr5rI4nP:1W1GKuxtZqnQVY5mhu7+2djvt9rI4P
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1F4738E7226D52CF2E9E991B520F71B33773E797148A29483AB229D955C321A0FF3530B
sha3_384: 7e29081910a9f7191cf76cf6a480acf709c0ebf624592bdad0dd3b5ecdd9d724bd9f7ee5c3886629fc7d73472684352c
ep_bytes: 558bec538b5d08568b750c578b7d1085
timestamp: 2011-08-18 14:29:04

Version Info:
Comments: 
CompanyName: Intel Corporation.
FileDescription: Intel Indeo(R) Video Interactive Quick Compressor
FileVersion: 4, 30, 62, 2
InternalName: ir41_32
LegalCopyright: Copyright(R)  Intel Corporation 1994-1997
LegalTrademarks: Indeo(R)  is a registered trademark of Intel Corporation
OriginalFilename: ir41_32.dll
PrivateBuild: 
ProductName: Intel Indeo(R)  Video Interactive Quick Compressor
ProductVersion: 4, 30, 62, 2
SpecialBuild: 
Translation: 0x0000 0x04b0

Graftor.591541 also known as:

Lionic	Trojan.Win32.Generic.4!c
AVG	Win32:Malware-gen
MicroWorld-eScan	Gen:Variant.Graftor.591541
FireEye	Generic.mg.8dc72c42e6ca41f8
Skyhigh	Artemis!Trojan
McAfee	Artemis!8DC72C42E6CA
Cylance	unsafe
Sangfor	Trojan.Win32.Agent.Vliv
Alibaba	Trojan:Win32/Generic.ebb68ada
Symantec	Trojan.Gen.MBT
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Agent.TCX
Cynet	Malicious (score: 100)
Avast	Win32:Malware-gen
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Graftor.591541
NANO-Antivirus	Trojan.Win32.Agent.cyuktj
Tencent	Malware.Win32.Gencirc.14032e87
Emsisoft	Gen:Variant.Graftor.591541 (B)
Zillya	Trojan.Agent.Win32.3875382
TrendMicro	TROJ_GEN.R002C0WBK24
Sophos	Mal/Generic-S
Webroot	W32.Trojan.Gen
MAX	malware (ai score=99)
Antiy-AVL	Trojan[Backdoor]/Win32.Agent
Kingsoft	malware.kb.a.740
Xcitium	Malware@#kmifvi1j9p0i
Arcabit	Trojan.Graftor.D906B5
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Graftor.591541
Google	Detected
ALYac	Gen:Variant.Graftor.591541
TACHYON	Trojan/W32.Agent.73728.DDA
VBA32	Backdoor.Agent
TrendMicro-HouseCall	TROJ_GEN.R002C0WBK24
Rising	Trojan.Agent!8.B1E (CLOUD)
Yandex	Trojan.GenAsa!nQGpjFcQOuQ
Ikarus	Trojan.SuspectCRC
Fortinet	W32/Agent.CIUV!tr.bdr
DeepInstinct	MALICIOUS
alibabacloud	Trojan:Win/Graftor

How to remove Graftor.591541?

Graftor.591541 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X